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CROSS REFERENCE TO RELATED APPLICATIONS 
This application is based upon, claims the benefit of 
priority of, and incorporates by reference Japanese Patent 
Application No. 2003-15323 filed January 23, 2003. 

Field of the Invention 

This invention relates to an electronic control unit 
having two computers in which each computer monitors whether 
or not the other computer is operating normally. 
Background of the Invention 

Generally, an electronic control unit including two 
computers is known in which each computer monitors whether or 
not the other computer is operating normally. For example, an 
electronic control unit described in Japanese Patent Laid-open 
Publication No. Hei 10-83321 (1998) controls a throttle valve 
of an internal combustion engine in a vehicle and includes a 
main CPU and a sub-CPU, wherein the operation of the main CPU 
is monitored by the sub-CPU. More specifically, the same 
temperature of coolant, the same accelerator pedal opening 
degree and the same position of a transmission gear in the 
internal combustion engine are input in the main CPU and the 
sub-CPU. The main CPU and the sub-CPU calculate a degree of 
throttle opening using the same arithmetic expression. Then, 
the sub-CPU receives the main CPU throttle opening degree 
calculated by the main CPU and determines whether or not the 



received main CPU throttle opening degree is coincident with 
the sub-CPU throttle opening degree calculated by the sub-CPU. 

Moreover, in order to determine whether or not such a 
monitor routine of the main CPU is performed appropriately, the 
5 sub-CPU executes a determination routine for the monitor 
routine logic. In this determination routine, a sub-routine 
for the aforementioned monitor routine is executed using dummy 
data of the temperature of coolant, the accelerator pedal 
opening degree, and the gear position in the internal combustion 

10 engine. Then, the degree of throttle opening calculated by 
execution of that sub-routine is compared to an expected value 
of throttle opening prepared in advance to correspond to the 
aforementioned dummy data. When the degree of throttle opening 
calculated based on the dummy data is coincident with the 

15 expected value prepared in advance in that comparison, the 
monitor routine logic is determined to function normally. 

However, according to the conventional technique 
mentioned above, it is determined only by the sub-CPU whether 
or not the monitor routine logic functions normally. Therefore, 

2 0 in a case where a determination command (comparison command or 
the like) in the sub-CPU is abnormal, there is a possibility 
that correct determination will not be performed. Thus, the 
conventional technique has a problem in that reliability of 
monitoring the operation of the main CPU by the sub-CPU is not 

25 sufficiently ensured* 

SUMMARY OF THE INVENTION 
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The present invention was made considering the 
aforementioned problem of the conventional technique and aims 
to provide an electronic control unit including two computers 
in which it is possible to monitor, by the first computer, a 
5 routine for determining whether or not a predetermined logic 
function in the second computer functions normally. 

In order to achieve the above object, according to a first 
aspect of the invention, an electronic control unit has a first 
computer and a second computer and outputs a control signal for 

10 an object of control based on a predetermined detection signal. 

The first computer includes a determination routine unit 
operable to, in order to check an abnormal state of a logic 
function for operating the control signal based on the 
predetermined detection signal, operate a dummy control signal. 

15 The dummy control signal uses dummy data stored in advance in 
accordance with the logic function and determines whether or 
not a relationship between the dummy control signal and an 
expected value of the dummy control signal, which is stored with 
respect to the dummy data in advance, is normal. A transmission 

2 0 unit operates to transmit, to the second computer, the dummy 
control signal and the expected value thereof that are used in 
a determination routine by the determination routine unit. 

The second computer includes a receiving unit operable to 
receive the dummy control signal and the expected value thereof 

2 5 and a monitor routine unit. The monitor routine unit operates 
to compare the dummy control signal and the expected value 
thereof received by the receiving unit so as to perform a 
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calculation routine for calculating monitor data. The monitor 
data is for monitoring whether or not a result of the 
determination routine by the determination routine unit is 
correct. The electronic control unit comprises a fail-safe 
5 . routine unit operable to perform a fail-safe routine based on 
the determination result by the determination routine unit and 
the monitor data by the monitor routine unit. 

As described above, the dummy control signal and the 
expected value thereof that are used in the determination 

10 routine for checking the abnormal state of the logic function 
in the first computer are transmitted to the second computer. 
The monitor routine unit of the second computer then compares 
the dummy control signal and the expected value thereof , thereby 
performing the calculation routine for calculating the monitor 

15 data for monitoring whether or not the result of the 
determination routine in the determination routine unit of the 
first computer is correct. Therefore, it is possible to enhance 
reliability of the determination routine in the first computer 
based on the monitor data calculated by the monitor routine unit 

20 of the second computer. 

According to a second aspect of the invention, it is 
preferable that the logic function include a first logic 
function for operating the control signal based on the 
predetermined detection signal and a second logic function, 

25 configured more simply than the first logic function, for 
operating a simplified control signal based on the 
predetermined detection signal. It is also preferable that the 
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determination routine unit further determine whether or not a 
relationship between the control signal operated in accordance 
with the first logic function and the simplified control signal 
operated in accordance with the second logic function is normal. 
5 In this manner, the operation load can be reduced by using 

the second logic function configured more simply than the first 
logic function in order to obtain a signal serving as a reference 
for determining whether or not the control signal operated in 
accordance with the first logic function is correct, instead 

10 of performing the same operation as the first logic function. 
Please note that the simplified control signal operated in 
accordance with such a simplified second logic function is not 
always coincident with the control signal operated in 
accordance with the first logic function. However, by 

15 configuring the second logic function in such a manner that the 
simplified control signal is larger than the control signal or 
the difference between the simplified control signal and the 
control signal is equal to or less than a predetermined value, 
for example, it is possible to determine whether the control 

20 signal is normal or abnormal from the magnitude of the 
relationship between the simplified control signal and the 
control signal or the magnitude of the difference between them. 

According to a third aspect of the invention, in a case 
where the logic function includes the first and second logic 

25 functions, as described above, it is preferable that the 
determination routine unit input the dummy data to the second 
logic function to operate a dummy simplified control signal and 
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determine whether or not a relationship between the dummy 
simplified control signal and its expected value is normal. In 
this case, it is possible to determine whether or not the second 
logic function for calculating the simplified control signal 
5 used as the reference for determining whether the control signal 
is normal or abnormal is correct. Thus, it is also possible 
to check whether or not determination of the normal state and 
the abnormal state of the control signal is performed normally. 
Moreover, by calculating the dummy simplified control signal 

10 in accordance with the second logic function configured more 
simply, it is possible to reduce the operation load for 
calculating the dummy control signal. 

According to a fourth aspect of the invention, it is 
preferable that the transmission unit transmit the control 

15 signal and the simplified control signal, as well as the dummy 
control signal and its expected value, to the second computer. 
It is also preferable that a diagnosis routine unit further 
compare the control signal with the simplified control signal 
to diagnose whether or not the determination routine in the 

20 determination routine unit functions normally. In this manner, 
it is possible to further enhance the reliability of the 
determination routine in the determination routine unit. 

According to a fifth aspect of the invention, it is 
preferable that a plurality of types of the dummy data are 

25 prepared. Additionally, when determining that the relationship 
between the dummy control signal and the expected value thereof 
is normal, the determination routine unit repeats the 



determination routine while changing the plurality of types of 
dummy data. When determining that the relationship between the 
dummy control signal and the expected value thereof is abnormal 
in the previous determination routine, the determination 
5 routine unit operates the dummy control signal by using the same 
dummy data as that used in the previous determination routine 
and determines whether or not the relationship between the thus 
calculated dummy control signal and its expected value is normal 
again. 

10 The computer may operate abnormally only for data having 

a specific pattern , for example, when the control signal is 
calculated in accordance with the aforementioned logic function. 
In this case, after the data pattern used in the operation is 
changed, such an abnormal operation does not occur and therefore 

15 it is determined that the operation is normal. Thus, in order 
to ensure the determination of the abnormal state even in a case 
when the computer operates abnormally only for the data having 
such a specific pattern, it is preferable to operate the dummy 
control signal by using the same dummy data again when the 

20 abnormal state is determined. 

It is not preferable to perform the fail-safe routine such 
as a routine for stopping the control, when the dummy control 
signal and its expected value are compared and it is determined 
that the relationship between them is not normal only once in 

25 the first or second computer. This is because one determination 
of the abnormal state may be caused by a simple error for 
retrieving data, for example, and therefore it is difficult to 



determine with certainty that the first computer is in the 
abnormal state in the first computer. Thus, as described above, 
the determination of whether or not the relationship between 
the dummy control signal and its expected value for the same 
5 dummy data is normal is performed more than once. 

According to a sixth aspect of the present invention, in 
a case where it is determined, by the determination routine unit 
whether the relationship between the dummy control signal and 
its expected value is normal or abnormal, that that relationship 

10 is abnormal a predetermined number of times, or in a case where 
the monitor data, indicating that the determination routine by 
the determination routine unit is to determine that the 
relationship between the dummy control signal and its expected 
value is abnormal, is calculated in the monitor routine unit 

15 a predetermined number of times, it is preferable that the 
abnormal state of the determination routine is settled and the 
fail-safe routine unit perform different fail-safe routines 
before and after the settlement of the abnormal state, 
respectively. By performing different fail-safe routines 

20 before and after the settlement of the abnormal state as 
mentioned above, it is possible to control the object of control 
as continuously as possible, for example, until the abnormal 
state is settled. After the settlement of the abnormal state, 
the fail-safe routine in which the control based on the control 

2 5 signal is prohibited, for example, is performed, because it is 
likely that the appropriate control cannot be performed. 

According to a seventh aspect of the invention, as a 
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specific example of those fail-safe routines, the output of the 
control signal to the object of control may be allowed before 
the settlement of the abnormal state, while control of the 
object of control by the control signal may be prohibited after 
the settlement of the abnormal state. 

According to an eighth aspect of the invention, in a case 
where the determination routine unit determines that the 
relationship between the control signal and the simplified 
control signal is not normal, or in a case where the monitor 
routine unit calculates the monitor data indicating that it is 
to be determined in the determination routine by the 
determination routine unit that the relationship between the 
control signal and the simplified control signal is abnormal, 
when the determination routine unit determines that the 
relationship between the dummy simplified control signal and 
its expected value is normal and the monitor routine unit 
calculates the monitor data indicating that it is to be 
determined in the determination routine by the determination 
routine unit that the relationship between the dummy simplified 
signal and its expected value is normal, the fail-safe routine 
unit may perform a fail-safe routine for controlling the object 
of control using the simplified control signal. 

In the above case, there is a high possibility that not 
the control signal but the simplified control signal is correct. 
Therefore, the use of the simplified control signal can provide 
more appropriate control as compared to a case where the control 
signal is used. 



Further areas of applicability of the present invention will 
become apparent from the detailed description provided 
hereinafter. It should be understood that the detailed 
description and specific examples, while indicating the 
5 preferred embodiment of the invention, are intended for 
purposes of illustration only and are not intended to limit the 
scope of the invention. 



BRIEF DESCRIPTION OF THE DRAWINGS 
10 The present invention will become more fully understood 

from the detailed description and the accompanying drawings, 
wherein: 

Fig. 1 is a block diagram showing a structure of an 
electronic control unit according to an embodiment of the 
15 present invention; 

Fig. 2 is a flowchart of a routine executed by a main CPU 
of the electronic control unit; 

Fig. 3 is a flowchart of a check routine for a target 
throttle opening degree calculation logic; 
2 0 Fig. 4 is a flowchart of a check routine for an estimated 

target throttle opening degree calculation logic; 

Fig. 5 is a diagram showing a format of dummy data used 
in the check routine for the estimated target throttle opening 
degree calculation logic; 
25 Fig. 6 is a flowchart of a routine executed by a sub-CPU 

of the electronic control unit; and 

Fig. 7 is a flowchart of a logic check determination 



routine. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
The following description of the preferred embodiments is 
5 merely exemplary in nature and is in no way intended to limit 
the invention, its application, or uses. 

An embodiment of an electronic control unit according to 
an embodiment of the present invention is described below on 
the basis of the accompanying drawings. Fig. 1 is a block 

10 diagram showing a configuration of the electronic control unit 
according to the present embodiment. The electronic control 
unit of the present embodiment can be applied to an engine 
control unit for controlling an internal combustion engine 
mounted in a vehicle. This engine control unit controls 

15 ignition timing, the amount of fuel injected in the internal 
combustion engine, and a throttle valve 6 provided in an intake 
path of the internal combustion engine. In the following 
description, the control of the throttle valve 6 by the engine 
control unit is described. 

20 As shown in Fig. 1 , the engine control unit 2 of the present 

embodiment (hereinafter, simply referred to as a control unit) 
includes an input circuit 20 that inputs a signal from an 
accelerator pedal opening degree sensor 10 for detecting the 
degree of the opening of an accelerator pedal (hereinafter, 

25 referred to as a pedal opening degree). The control unit 2 
further includes a signal from a water-temperature sensor 12 
for detecting the temperature of coolant in the internal 
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combustion engine, a signal from an air-flow sensor 14 for 
detecting the intake air flow in the intake path of the internal 
combustion engine, a signal from a vehicle speed sensor 16 for 
detecting the traveling speed of the vehicle, and a signal from 
5 an opening degree sensor 18 that detects the actual degree of 
opening of the throttle valve 6 from the driving amount of a 
driving motor 8 for driving the throttle valve 6 and the like. 
The input circuit 20 also outputs the respective input signals 
after converting them into digital signals. 

10 The control unit 2 further includes a ROM 22 in which logic 

for calculating a target degree of throttle opening that serves 
as a control signal for controlling the degree of opening of 
the throttle valve 6 and a program related to a determination 
routine for determining whether or not that logic normally 

15 functions have been stored in advance. Also in the ECU 2, there 
is a main CPU 26 for executing calculation of the target opening 
degree of the throttle valve 6 and various control routines for 
determining whether the calculation is normal or abnormal in 
accordance with the program stored in the ROM 22 and a RAM 24 

20 for temporarily storing the result of the routine executed by 
the main CPU 26. 

The main CPU 26 is connected to a watchdog timer (WDT) 28. 
The WDT 28 monitors whether or not a watchdog pulse W/D is output 
from the main CPU 26 at regular intervals, and outputs a reset 

25 signal RST to the main CPU 26 when the output of the watchdog 
pulse W/D is stopped. The control unit 2 further includes a 
ROM 30 in which a monitor routine for calculating monitor data 



for monitoring whether the determination routine by the main 
CPU 26 is normal or abnormal and a program related to a control 
routine for controlling the opening degree of the throttle valve 
6 based on the target degree of throttle opening transmitted 
5 from the main CPU 26, a sub-CPU 34 for monitoring the 
determination routine by the main CPU 2 6 and controlling the 
opening degree of the throttle valve 6, and a RAM 32 for 
temporarily storing the result of the routine by the sub-CPU 
34. 

10 In the control unit 2 of the present embodiment, the main 

CPU 26 determines whether or not the logic for calculating the 
target degree of throttle opening functions normally by 
executing a routine shown in Fig. 2, and transmits to the sub-CPU 
34 a target control opening degree of the throttle valve 6 

15 (hereinaf ter , simply referred to as a target degree of throttle 
opening) calculated based on the aforementioned signals input 
from the input circuit 16 in a case where it is determined that 
the logic functioned normally. The sub-CPU 34 then outputs a 
driving command in accordance with the target degree of throttle 

20 opening to an output circuit 36. Then, the throttle driving 
motor 8 is operated by the output circuit 36, thereby the opening 
of the throttle valve 6 is adjusted to be coincident with the 
target degree of the throttle opening. 

Moreover, in the control unit 2 of the present embodiment, 

25 the aforementioned signals input from the input circuit 20 to 
the main CPU 26 are also input to the sub-CPU 34. In addition, 
the main CPU 26 and the sub-CPU 34 are connected to communicate 
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with each other via a serial communication line 38. 

The sub-CPU 34 executes normal monitoring using the 
watchdog pulse , in which the sub-CPU 34 monitors whether or not 
the watchdog pulse W/D is output from the main CPU 26 at regular 
5 intervals and outputs the reset signal RST to the main CPU 26 
when the output of the watchdog pulse W/D is stopped. The 
sub-CPU 34 further monitors whether or not the determination 
routine by the main CPU 26 operates normally by executing a 
monitor routine shown in Fig. 7 to be described later. 

10 Next, routines respectively executed by the main CPU 26 

and the sub-CPU 34 will be described. Fig. 2 is a flowchart 
of the routine executed by the main CPU 26 (main CPU routine) . 
Execution of this main CPU routine starts when an ignition 
switch (not shown) of the vehicle is turned on. Moreover, the 

15 main CPU routine is repeated at a predetermined time interval. 

In Step S100, a target throttle opening degree calculation 
logic for calculating the target degree of opening of the 
throttle valve 6 is called, thereby the target degree of 
throttle opening is calculated based on the signals detected 

20 by the respective sensors. The calculation result is 
temporarily stored in the RAM 24. 

Then, in Step SI 10, a determination routine (check 
routine) is performed for determining whether or not the target 
throttle opening degree calculation logic normally functions . 

25 The details of this check routine are shown in the flowchart 
of Fig. 3. 

In Step Sill in Fig. 3, input data of the detection signals 
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of the respective sensors that are used in calculation of the 
target degree of throttle opening in Step S100, is set in the 
RAM 24 once. The reason why the input data is set in the RAM 
24 once is as follows. An estimated target throttle opening 
5 degree calculation logic is called in the routine shown in this 
flowchart and a routine described later, shown in Fig. 4. 
Therefore , in order to achieve easier switching of input and 
output values and prevent incorrect use of the output value, 
the input and output values are stored in the RAM 24 once. 

10 Then, in Step S112, the estimated target throttle opening 

degree calculation logic is called, and an estimated target 
degree of throttle opening is calculated based on the input data 
set in the RAM 24 in Step Sill. The calculation result is stored 
in the RAM 24 once. 

15 Here, a difference between the target throttle opening 

calculation logic and the estimated target throttle opening 
calculation logic is described. The target throttle opening 
degree calculation logic calculates the target degree of 
throttle opening used for actually controlling the opening 

20 degree of the throttle valve 6. Therefore, a degree of throttle 
opening that is requested from the pressed amount of the 
accelerator pedal detected by the accelerator-pedal opening 
degree sensor 10 is used as a base and is subjected to various 
types of correction, thereby finally calculating the target 

25 degree of throttle opening. 

For example, immediately after the start of the internal 
combustion engine, it is known that the correction amounts for 
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the throttle opening degree at the start are calculated based 
on each of the coolant temperature, the degree of warm-up or 
temperature of the catalytic converter, the state of 
deceleration of the vehicle, the idle-up state, and the like 
5 in the internal combustion engine. Then, the aforementioned 
pedal-requested throttle opening degree is increased/decreased 
by the above throttle opening correction amounts so that the 
target degree of throttle opening can be calculated. 

Moreover, in the target throttle opening degree 

10 calculation logic, a position at which the accelerator pedal 
is fully closed or a position at which the throttle valve 6 is 
fully closed is learned based on the detection signals of the 
accelerator-pedal opening degree sensor 10 or the throttle 
opening degree sensor 18. Then, using the learned position as 

15 a reference, the opening degree of the accelerator pedal (pushed 
amount of the accelerator pedal) or the opening degree of the 
throttle valve 6 is calculated from the detection signals of 
the accelerator-pedal opening degree sensor 10 or the throttle 
opening degree sensor 18. 

2 0 In this manner, in the target throttle opening degree 

calculation logic, the pedal-requesting throttle opening 
degree is subjected to various types of correction in detail 
in order to consider the state of the internal combustion engine 
and to reduce error factors in the detection signals of the 

25 respective sensors. Additionally, the estimated target 
throttle opening degree calculation logic is configured more 
simply compared to the target throttle opening degree 
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calculation logic. This is because the estimated target 
throttle opening degree calculation logic is used for 
calculating the estimated target throttle opening degree that 
serves as a reference for determining whether or not the target 
5 throttle opening degree calculated by the target throttle 
opening degree calculation logic is normal. The estimated 
target degree of throttle opening thus calculated in accordance 
with the estimated target throttle opening degree calculation 
logic having such a simplified configuration is not always 

10 coincident with the target degree of throttle opening. 

However, by configuring the estimated target throttle opening 
degree calculation logic in such a manner that the estimated 
target throttle opening degree is always larger than a control 
signal or by configuring such that the difference between the 

15 estimated target throttle opening degree and the control signal 
is equal to or less than a predetermined value, for example, 
it can be determined whether the target degree of throttle 
opening is normal or abnormal from the relationship of magnitude 
between the estimated target degree and the target degree of 

20 throttle opening or the magnitude of the difference between 
them. 

In order to configure the estimated target throttle 
opening degree calculation logic more simply compared to the 
target throttle opening degree calculation logic, an expression 
25 for calculation is simplified by, for example, omitting several 
correction terms in the target throttle opening calculation 
logic, altering variable values to fixed values in calculation 
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of the pedal-requesting throttle opening degree, calculation 
of the correction amount by each correction term and calculation 
of the learned value, or replacing a plurality of maps with a 
single typical map. By simply configuring the estimated target 
5 throttle opening degree calculation logic in the above manner, 
it is possible to reduce operation load in the determination 
routine for determining whether the target degree of throttle 
opening calculated by the target throttle opening degree 
calculation logic is normal or abnormal. 

10 In Step S113, the target degree of throttle opening 

calculated in Step SI 00 is compared to the estimated target 
degree of throttle opening calculated in Step SI 12, thereby it 
is determined whether or not the relationship between them is 
normal, i.e. , whether or not the target throttle opening degree 

15 is equal to or less than the estimated target throttle opening 
degree in the present embodiment. In a case where the 
relationship between the target throttle opening degree and the 
estimated target throttle opening degree is determined to be 
normal in that determination, it is determined in Step SI 14 that 

2 0 the target throttle opening degree calculation logic functions 
normally. On the other hand, in a case where the relationship 
between the target throttle opening degree and the estimated 
target throttle opening degree is determined to be abnormal, 
it is determined in Step SI 15 that the target throttle opening 

25 degree calculation logic functions abnormally. 

Then, in Step S12 0 of the flowchart shown in Fig. 2, a 
determination routine (check routine) for checking whether or 
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not the estimated target throttle opening degree calculation 
logic correctly calculates the estimated target degree of 
throttle opening is performed. More specifically, in this check 
routine, a dummy estimated target degree of throttle opening 
5 is calculated based on predetermined dummy data in accordance 
with the estimated target throttle opening degree calculation 
logic, and the thus calculated dummy estimated target degree 
of throttle opening is compared to an expected value of the 
estimated target degree of throttle opening prepared in advance 

10 to correspond to that dummy data. When the dummy estimated 
target degree of throttle opening calculated based on the dummy 
data is coincident with the expected value prepared in advance 
in that comparison, it is determined that the estimated target 
throttle opening degree calculation logic correctly calculates 

15 the estimated target degree of throttle opening. The details 
of this check routine are shown in the flowchart of Fig. 4. 

In Fig. 4, in Step S121, the estimated target throttle 
opening degree calculation logic is already determined to be 
abnormal and it is then determined whether or not the current 

20 state is a provisional abnormal state where the number of times 
the estimated target throttle opening degree calculation logic 
is determined to be abnormal is less than a predetermined number. 
Then, in a case where it is determined that the current state 
is not the provisional-abnormal state, the routine goes to Step 

25 S123. In Step S123, one piece of a plurality of pieces of dummy 
data that respectively have a plurality of numbers assigned 
thereto, as shown in Fig. 5, is set in the RAM 24, after the 



number of the one piece of the dummy data is updated. On the 
other hand, in a case where it is determined in Step S121 that 
the current state is the provisional-abnormal state, the 
routine goes to Step S122 where the same piece of the dummy data 
5 as the previous one is set in the RAM 24. 

The dummy data is formed by input data such as 
water-temperature dummy data, dummy data of accelerator-pedal 
opening degree, vehicle-speed dummy data for calculating the 
dummy estimated target throttle opening degree in accordance 
10 with the estimated target throttle opening degree calculation 
logic, and the expected value of the estimated target degree 
of throttle opening that is to be calculated from that input 
data. 

When the main CPU 26 calculates the estimated target 
15 degree of throttle opening in accordance with the 
aforementioned estimated target throttle opening degree 
calculation logic, an abnormal operation may occur only for data 
having a specific pattern. In this case, after the pattern of 
data used in the calculation of the estimated target throttle 
20 opening degree was changed the abnormal operation does not occur, 
and therefore it is determined that the estimated target 
throttle opening degree can be calculated normally. Thus, in 
the present embodiment, in order to allow the abnormal state 
to be certainly and rapidly determined even in a case where the 
25 abnormal operation occurs only for the data having a specific 
pattern, when the abnormal state occurred once, the dummy 
estimated target throttle opening is calculated again by using 



the same dummy data. On the other hand, in a case where it is 
not determined that the estimated target throttle opening 
degree calculation logic is in the provisional -abnormal state, 
the dummy data is updated in order to confirm whether or not 
5 the estimated target throttle opening degree can be calculated 
correctly based on various patterns of data. 

Please note that it cannot be determined with certain that 
the estimated target throttle opening degree calculation logic 
functions abnormally when it is determined only once that the 

10 relationship between the dummy estimated target degree of 
throttle opening calculated based on the dummy data and the 
expected value thereof is not normal based on the comparison 
of the calculated dummy estimated target throttle opening 
degree and the expected value thereof. This is because only 

15 one determination that the above relationship is not normal may 
be caused by a simple error in retrieving data, for example. 
Therefore, in the present embodiment, the abnormal state of the 
estimated target throttle opening degree calculation logic is 
settled when it is determined a predetermined number of times 

20 that the relationship between the dummy estimated target degree 
of throttle opening and the expected value thereof is abnormal. 
In the provisional abnormal state that is a state before 
declaration or settlement of the abnormal state, it is 
determined a plurality of number of times whether or not the 

25 relationship between the dummy estimated target degree of 
throttle opening and the expected value thereof is normal by 
using the same dummy data. 
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In Step S124 in Fig. 4, the estimated target throttle 
opening degree calculation logic is called, and the dummy 
estimated target degree of throttle opening is calculated based 
on the dummy data set in the RAM 24 in Step S122 or S123. The 
5 calculation result is stored in the RAM 24 once. Then, in Step 
S125, the dummy estimated target degree of throttle opening and 
the expected value thereof, which are set in the RAM 24, are 
compared to each other. In a case where it is determined that 
the dummy estimated target degree of throttle opening and the 

10 expected value thereof are equal, it is determined in Step Si 26 
that the estimated target throttle opening calculation logic 
functions normally. To the contrary, in a case where it is 
determined that the relationship between the dummy estimated 
target degree of throttle opening and the expected value thereof 

15 is abnormal, it is determined in Step SI 2 7 that the estimated 
target throttle opening degree calculation logic is abnormal. 

When the check of the target throttle opening degree 
calculation logic in Step S110 and the check of the estimated 
target throttle opening degree calculation logic in Step S120 

2 0 are finished, a monitor request is transmitted to the sub-CPU 
34 and the result of the monitor is received in Step S130. In 
other words, in the present embodiment, not only the check of 
whether or not the target throttle opening degree calculation 
logic and the estimated target throttle opening degree 

25 calculation logic function normally in the main CPU 26 is 
performed, but also calculation of monitor data for monitoring 
whether or not the check (determination routine) in the main 
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CPU 2 6 operates normally is performed in the sub-CPU 34. In 
this manner , reliability of the check function in the main CPU 
can be enhanced. 

Fig. 6 is a flowchart of a routine executed in the sub-CPU 
5 (sub-CPU routine). First, the monitor request from the main 
CPU 26 is received in Step S131. The monitor request from the 
main CPU 26 contains the target degree and estimated target 
degree of throttle opening, and the dummy estimated target 
degree of throttle opening and the expected value thereof, that 
10 are used in determining whether or not the target throttle 
opening degree calculation logic and the estimated target 
throttle opening degree calculation logic functioned normally 
in the main CPU 26. The sub-CPU 34 stores them in the RAM 32 
once. 

15 In Step S132, it is determined if the target throttle 

opening degree is less than or equal to the estimated target 
throttle opening degree. In a case where the relationship 
between the target degree of throttle opening and the estimated 
target degree of throttle opening is normal, it is determined 

2 0 in Step SI 33 that that relationship is to be determined to be 
normal in the target throttle opening degree determination 
logic, as monitor data. On the other hand, in a case where the 
relationship between the target degree of throttle opening and 
the estimated target degree of throttle opening is abnormal, 

25 it is determined in Step S133 that that relationship is to be 
determined to be abnormal in the target throttle opening degree 
determination logic, as the monitor data. 
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In a case where the determination of whether or not the 
relationship between the target degree and the estimated target 
degree of throttle opening is normal is performed only in the 
main CPU 26, the relationship between them may be incorrectly 
5 determined to be normal, although that relationship is actually 
abnormal, because a determination order (comparison order or 
the like) in the main CPU 26 is abnormal. Therefore, in the 
present embodiment, the target degree and the estimated target 
degree of throttle opening are received from the main CPU 26 

10 and they are also compared in the sub-CPU 34. In this manner, 
even in a case where the determination order in the main CPU 
26 or the like is abnormal, the monitor data corresponds to the 
abnormal state when the relationship between the target degree 
and the estimated target degree of throttle opening is abnormal. 

15 In Step SI 35, the dummy estimated target degree of 

throttle opening is compared to the expected value thereof, 
thereby it is determined whether or not the relationship between 
them is normal. In a case where the dummy estimated target 
degree of throttle opening is coincident with the expected value 

2 0 thereof and the relationship between them is normal in that 
determination, it is determined in Step S13 6 that that 
relationship is to be determined to be normal in the estimated 
target throttle opening degree determination logic, as the 
monitor data. To the contrary, in a case where the relationship 

25 between the dummy estimated target throttle opening degree and 
the expected value thereof is abnormal, it is determined in Step 
S137 that that relationship is to be determined to be abnormal 



in the estimated target throttle opening degree determination 
logic, as the monitor data. 

In Step S138, the monitor result (monitor data) is 
transmitted to the main CPU 34. This monitor result is formed 
5 by the determination result indicating that the determination 
result by the target throttle opening degree determination 
logic is to be normal or abnormal and the determination result 
indicating that the determination result by the estimated 
target throttle opening degree determination logic is to be 

10 normal or abnormal. 

When the monitor result from the sub-CPU 3 4 is received 
in Step S130 of the flowchart in Fig. 2, it is determined in 
Step S14 0 whether or not the main CPU 26 determined that the 
target degree of throttle opening was correctly calculated in 

15 accordance with the target throttle opening calculation logic 
and whether or not the sub-CPU 3 6 calculated the monitor result 
indicating that the determination result by the determination 
routine in the main CPU 26 is to be normal. More specifically/ 
it is determined in the main CPU 26 in Steps SI 14 and SI 15 of 

2 0 the flowchart in Fig. 3 whether or not the target degree of 
throttle opening was correct, and the monitor result by the 
sub-CPU 36 is calculated in Steps S133 and S134 of the flowchart 
in Fig. 6. Therefore, determination based on the determination 
result and monitor result is performed. 

25 When both the determination result by the main CPU 2 6 and 

the monitor result by the sub-CPU 34 , related to the target 
degree of throttle opening, are OK in the determination in Step 
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S140, the throttle valve 6 is controlled in a normal control 
mode in Step S190. On the other hand, when at least one of the 
determination result by the main CPU 26 and the monitor result 
by the sub-CPU 34 is NG, a check determination routine for the 

. 5 estimated target throttle opening degree calculation logic is 
performed in Step SI 50. 

The details of this check determination routine are shown 
in a flowchart of Fig. 7. As shown in Fig. 7 , it is determined 
in Step 151 whether or not the main CPU 24 determined that the 

10 estimated target throttle opening calculation logic correctly 
calculated the estimated target degree of throttle opening and 
whether or not the sub-CPU 36 calculated the monitor result 
indicating that the result of the determination routine by the 
main CPU 2 6 is to be normal. More specifically, it is determined 

15 by the main CPU 2 6 whether or not the estimated target degree 
of throttle opening is correct in Steps S126 and S127 of the 
flowchart of Fig. 4, and the monitor result by the sub-CPU 26 
is calculated in Steps S136 and S137 of the flowchart of Fig. 
6. Therefore, the determination based on the determination 

2 0 result and monitor result is performed. In a case where the 
determination in Step S151 determines that the main CPU 2 6 and 
the sub-CPU 34 are OK, it is determined in Step S155 that the 
check of the estimated target throttle opening degree 
calculation logic was done normally. 

25 On the other hand, in a case where at least one of the 

determination result by the main CPU 26 and the monitor result 
by the sub-CPU 34 is NG, the number of times it was successively 



determined that the determination result or monitor result was 
NG is counted in Step S152. When this counted number of times 
is less than a predetermined number, the determination that the 
abnormal state occurs may be concluded because of the error of 
retrieving data or the like f as mentioned above. Therefore, 
in Step S153, it is determined that the result of the check of 
the estimated target throttle opening degree calculation logic 
is in the provisional abnormal state. In the provisional 
abnormal state, when the number of times it was determined that 
at least one of the determination result by the main CPU 26 and 
the monitor result by the sub-CPU 34 was NG has reached the 
predetermined number, it is determined that the abnormal state 
is settled in Step S154. 

After the logic check determination is done in Step S150 
in the aforementioned manner, the result of that determination 
is judged in Step S160. At that judgment, when it is determined 
that the abnormal state was settled, the routine goes to Step 
SI 70 and the control mode of the throttle valve 6 is set to an 
escape driving mode. In this escape driving mode, the opening 
degree of the throttle valve 6 is fixed to, for example, an 
opening degree at which the internal combustion engine is driven 
at an idling engine speed, so as to prevent the opening degree 
of the throttle valve 6 from opening to an abnormal opening 
degree. In a case where it is determined that the current state 
is the provisional abnormal state in Step SI 60, the abnormal 
state has not been settled yet, i.e., there is a possibility 
that the current state is a state in which the throttle valve 



6 can be appropriately controlled. Therefore, the control mode 
for the throttle valve 6 is set to the normal control mode. 

In this normal control mode, the target degree of throttle 
opening is calculated based on the respective detection signals 
5 in the main CPU 2 6 by using the aforementioned target throttle 
opening degree calculation logic. The thus calculated target 
degree of throttle opening is transmitted to the sub-CPU 34. 
The sub-CPU 34 then adjusts the driving motor 8 via the output 
circuit 3 6 so as to make the opening degree of the throttle valve 

10 6 coincident with that target degree of throttle opening. 

In a case where it is determined in Step S160 that the 
determination result is normal, the control mode for the 
throttle valve 6 is set to an estimated target opening degree 
control mode in Step S180. In that estimated target opening 

15 degree control mode, the throttle valve 6 is controlled using 
the estimated target degree of throttle opening that is usually 
used only for determining whether the target degree of throttle 
opening is normal or abnormal. In other words, in a case where 
at least one of the determination results for the main CPU 2 6 

20 and the sub-CPU 34 related to the target degree of throttle 
opening in Step S140 is NG but both the determination results 
for the main CPU 26 and the sub-CPU 34 related to the estimated 
target degree of throttle opening in Step SI 60 are normal, it 
can be estimated that something abnormal occurs in the target 

25 degree of throttle opening although the estimated target degree 
of throttle opening is correctly calculated. Thus, by 
continuing the control based on the estimated target degree of 
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throttle opening , it is possible to appropriately control the 
throttle valve 6 and is also possible to suppress degradation 
of driving performance as compared to the escape driving mode. 
As described above, according to the control unit 2 of the 
5 present embodiment, the data used by the main CPU 2 6 in the 
determination routine (the target degree and the estimated 
target degree of throttle opening, and the dummy estimated 
target degree of throttle opening and the expected value 
thereof) is transmitted to the sub-CPU 34. The sub-CPU 34 

10 compares data pieces in each of the pairs so as to calculate 
the monitor data for monitoring whether or not the result of 
the determination routine by the main CPU 24 is correct. In 
this manner, the control unit 2 of the present embodiment does 
not determine whether or not the determination routine normally 

15 functions by one of the CPUs but performs determination and 
monitoring by both the main CPU 26 and the sub-CPU 34 . Therefore, 
it is possible to enhance reliability of the determination 
routine for determining whether or not each logic routine 
functions normally . 

2 0 The electronic control unit according to the present 

invention is not limited to the aforementioned embodiment but 
can be implemented with various modifications. 

(1) For example, in the aforementioned embodiment, the 
determination routine for determining whether or not the target 

25 degree and the estimated target degree of throttle opening are 
correct is performed in the main CPU 26, while the calculation 
of the monitor data for monitoring whether or not that 
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determination routine was performed correctly is performed in 
the sub-CPU 34. However, it is possible to alter the manner 
of assigning the functions to the main CPU 26 and the sub-CPU 
34 in various ways. For example, the determination routine for 
5 determining whether or not the target degree and the estimated 
target degree of throttle opening are correct may be performed 
in the sub-CPU 34 while the monitor data for that determination 
routine may be calculated in the main CPU 26. Moreover, the 
determination routine for the target degree of throttle opening 
10 may be performed in the main CPU 26, the determination routine 
for the estimated target degree of throttle opening may be 
performed in the sub-CPU 34, and the monitor data processing 
for the respective determination routine may be performed in 
another CPU. 

15 In addition, in the aforementioned embodiment, the 

monitor result is transmitted from the sub-CPU 34 to the main 
CPU 26, and the discrimination of the control mode for the 
throttle valve 6 based on the determination result in the main 
CPU 26 and the monitor result in the sub-CPU 34 is performed 

2 0 in the main CPU 26. However, this discrimination may be 
performed in the sub-CPU 34. 

(2) In the electronic control unit 2 according to the 
aforementioned embodiment, it is determined whether or not the 
target degree of throttle opening calculated in accordance with 

25 the target throttle opening degree calculation logic is correct 
by comparing it with the estimated target degree of throttle 
opening calculated in accordance with the estimated target 



throttle opening degree calculation logic. It is also 
determined by using the dummy data whether or not the correct 
estimated target degree of throttle opening is calculated in 
accordance with the estimated target throttle opening degree 
5 calculation logic . 

However, it may be determined whether or not the target 
throttle opening calculation logic calculates the correct 
target degree of throttle opening by inputting the dummy data 
to the target throttle opening degree calculation logic so as 

10 to calculate a dummy target degree of throttle opening and then 
determining whether or not the calculated dummy target throttle 
opening degree is coincident with (equal to) an expected value 
thereof. In this case, it is possible to omit the estimated 
target throttle opening degree calculation logic. 

15 Moreover, the estimated target throttle opening degree 

calculation logic may be configured to perform the same 
operations as those in the target throttle opening degree 
calculation logic, instead of being configured more simply as 
compared to the target throttle opening degree calculation 

20 logic in the aforementioned embodiment. 

(3) In the aforementioned embodiment, when both the 
determination result in the main CPU 26 and the monitor result 
in the sub-CPU 34 that are related to the target degree of 
throttle opening are OK (Step S140 in the flowchart of Fig. 2), 

25 the control mode for the throttle valve 6 is set to the normal 
control mode without performing the logic check determination 
(Step S150 in the flowchart of Fig. 2). However, the normal 



control mode may be set when both the determination result in 
the main CPU 26 and the monitor result in the sub-CPU 34 that 
are related to the target degree of throttle opening are OK and 
the result of the logic check determination is normal. In this 
case, when at least one of the determination result in the main 
CPU 2 6 and the monitor result in the sub-CPU 3 4 that are related 
to the target degree of throttle opening is NG, or when the 
result of the logic check determination is in the 
provisional-abnormal state a multiple number of times in 
succession, it is determined that the abnormal state is settled. 

(4) In the aforementioned embodiment, in a case where the 
result of the logic check determination is in the provisional 
abnormal state, the control mode for the throttle valve 6 is 
set to the normal control mode. Alternatively, in light of 
preventing abnormal control without fail, the control mode for 
the throttle valve 6 may be set to the escape driving mode both 
in the provisional-abnormal state and the settled abnormal 
state. However, because the driving performance of the vehicle 
becomes significantly lower in the escape driving mode, the 
control mode for the throttle valve 6 in the provisional 
abnormal state may be set to a maximum opening limiting mode 
in which the opening degree of the throttle opening 6 is limited 
under a predetermined upper limit, for example. 

(5) Moreover, in the aforementioned embodiment, in a case 
where at least one of the determination result in the main CPU 
2 6 and the monitor result in the sub-CPU 34 that are related 
to the target degree of throttle opening is NG and the result 
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of the logic check determination is normal , the control mode 
for the throttle valve 6 is set to the estimated target opening 
degree control mode. However, in this case, the throttle valve 
6 may be controlled in the escape driving mode or the maximum 
5 opening limiting mode, instead of the estimated target opening 
degree control mode. 

The description of the invention is merely exemplary in 
nature and, thus, variations that do not depart from the gist 
of the invention are intended to be within the scope of the 
10 invention. Such variations are not to be regarded as a departure 
from the spirit and scope of the invention. 
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